Some kind of cryptographic signing of the executable could probably help with that.

Ultimately I don’t believe there can ever be a foolproof solution and the emphasis should be on client-side parental controls.